Software Deployment

[Preacher Man]

I am testing Software Deployment on my Windows 2000 Server. My question is:
Can the software be deployed to a Windows XP workstation or does the OS have
to be Win2K?

Thanks.

 

[ptwilliams]

You can deploy to any machine capable of processing GPO (providing the
machine is within scope):

Windows 2000
Windows XP
Windows 2003

 

[Preacher Man]

Thanks for the reply. I have another question too.

When should I use the computer portion of the GPO vs the user portion to
deploy my software. I understand that Publish is only available for the
user portion. Is there anything else?

Thanks.

 

[Preacher Man]

Either way the user will have to execute the installation, correct?

 

[ptwilliams]

When should I use the computer portion of the GPO vs the user portion to

deploy my software. I understand that Publish is only available for the
user portion. Is there anything else?

Generally you will want to assign to a computer. You might want to publish
smaller apps so that users can use them whenever. For example, I used to
publish the support tools to the administrators.

You use computer configuration for big apps that are for the entire system,
e.g. MS Office, an SP, etc.

 

[ptwilliams]

No. If you assign to a computer it is installed prior to the user being
able to press Ctrl+Alt+Del. When the computer says applying computer
settings...

 

[Preacher Man]

Mine doesn't seem to be working then. Do you have any troubleshooting tips.

I have the folder set in the Software Installation properties, then I added
my MSI file. But I can't tell that it does anything.

You've been a great help by the way. Thanks.

 

[Preacher Man]

I changed it to publish and it showed up in the add software list. I must
have something wrong with the assign settings. On the GPO or the Assigned
Software security settings, do I have to have the Computer listed in the ACL
or just the username?

 

[Preacher Man]

I checked my error log and it says that the installation file was not
available. In my software distribution folder, do I have to have Everyone
allowed permissions? Or what permissions do I need on that folder. I can
access the folder I have the file in once I have logged in, but for some
reason it can't access it before. Does the DC have to access that folder
too?

Thanks.

 

[ptwilliams]

OK, assuming that you've configured software installation under computer
configuration, and you've chosen assign (you can't publish), then the first
things to look at are as follows:

Is the computer in question within the scope of the GPO? That is, if the
GPO is linked to an OU is the computer within that OU?
If so, run RSoP to see if the policy is being applied.
Also, check the event logs for userenv and scecli warnings and errors.

You've been a great help by the way. Thanks.

Good. No problem!!!

 

[ptwilliams]

Authenticated Users is fine; unless you are filtering. If you are filtering
you will need users (or groups of users) for user policy and computers (or
groups of computers) for computer policy.

If you can choose publish, you are in user settings and this will not apply
to computers.

 

[Preacher Man]

Is RSop an optional utility and where can I get it?

 

[ptwilliams]

You must use a UNC path and the clients must be able to access it
(permissions).

 

[ptwilliams]

Ah, you're using 2000.

You'll have to use the command-line, resource kit tool gpresult instead.

Apologies.

 

[Preacher Man]

No problem. Thanks again for all your help. The latest test run worked.
It has something to do with my permissions. If you don't mind I would like
to know a proper setup for accomplishing the following task.

For new computers that I install Windows XP to from the CD, I would like to
already have the necessary programs like Adobe Reader, etc. Is it better to
publish the software or assign it. And if assign it, is it better to use
Computer Config or User Config? Can you tell me if there are any
differences between Computer Config Assign and User Config Assign, besides
the fact the the software installation occurs before login for the Computer
Config and after the log in for the User Config?

Thanks.

 

[Herb Martin]

The install Share and File permissions must be readable
by the "assignee" (the Computer or the User.)

When you create a Software package, you supply a
location.

That is a share point with files. Can you connect to that
sharepoint (as a non-admin) and read those files?

 

[Preacher Man]

For this test run, I placed a file that only I could access. When I tried
placing the file in a public folder it worked. If I wanted to restrict
installation access to only me, would I place the computer in the ACL or the
username?

 

[Herb Martin]

For this test run, I placed a file that only I could access. When I tried
placing the file in a public folder it worked. If I wanted to restrict
installation access to only me, would I place the computer in the ACL or the
username?

Restrict to you? -- you in the ACL

Restict to the computer? -- computer account in the ACL.

(And we really should put a LOCAL group in the ACL for
the resources -- put the 'users', including computer accounts
in a global group and place that global in the Local with the
permissions.)

And of course you could do both: put anyone in group
with permissions. Or use two groups and give yourself
(admin) full control, and the computers read so they can
install it.